| .. |
|
config.sh
|
a756114e59
firewall: change the order of IPv4/IPv6 address detection, fixes mixed notation v6 improperly detected as v4 address
|
15 years ago |
|
core.sh
|
f90328f26e
firewall: make invalid redirects and duplicate zones non-fatal, print a notice and discard them
|
15 years ago |
|
core_forwarding.sh
|
f3dd8278bb
firewall: - simplify masquerade rule setup - remove various subshell invocations - speedup fw() by not relying on xargs and pipes - rework SNAT support - attach to dest zone, use src_dip/src_dport as snat source
|
15 years ago |
|
core_init.sh
|
995face56d
firewall: make ESTABLISHED,RELATED rules match before INVALID, use conntrack instead of state match (#10038)
|
14 years ago |
|
core_interface.sh
|
90ac92e8be
firewall: fix serious bug in state var handling (#9746)
|
14 years ago |
|
core_redirect.sh
|
a92ed1808c
firewall: make sure that -m mac is used with --mac-source, follow up to r27508
|
14 years ago |
|
core_rule.sh
|
7a206885df
firewall: prevent redundant rules if multiple ports and multiple icmp types are given in a rule block for both icmp and other protocols
|
14 years ago |
|
fw.sh
|
dd4934a943
firewall: - solve scoping issues when multiple values are used, thanks Daniel Dickinson - ignore src_port/dest_port for proto icmp rules, ignore icmp_type for non-icmp rules - properly handle icmp when proto is given in numerical form (1, 58) - support negated icmp types
|
14 years ago |
|
uci_firewall.sh
|
c284cb51c0
firewall: - replace uci firewall with a modular dual stack implementation developed by Malte S. Stretz - bump version to 2
|
16 years ago |
Jo-Philipp Wich
995face56d
firewall: make ESTABLISHED,RELATED rules match before INVALID, use conntrack instead of state match (#10038)